Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File:                     mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier:          mMXD0EhJIMkmOntLFuj7tiMcbNNuwezJH8sWngwAH9M=
Subject key identifier:   BA:17:11:AD:47:A5:39:70:90:4D:AE:6A:AD:FB:CF:53:B3:9C:0A:77
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer:       /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial:       01962F743809D6C12EB251451A442EF75D29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 1Lqm7Z3ZvF5pC9_HDRj5UNkhd7A.roa (hash: kWMYsrVZaVYfP4Ct5LwW7USETz9giRgVCzYAo1+XF/g=)
                          2: QAnENOV7C6lzH_x8jNRvH6GLqjc.roa (hash: 9SXWdd7rJD88L+XO12WxPTCi0XtVW7lKw0msZqZnedw=)
                          3: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=)
                          4: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: aVTWqQxwnjOWF60+3qVJcx7/3Y/AofftpaxplsA89kE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:38:09:d6:c1:2e:b2:51:45:1a:44:2e:f7:5d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=ba1711ad47a53970904dae6aadfbcf53b39c0a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:4e:6d:3e:74:21:6f:c0:97:bb:60:8f:83:
                    78:06:ae:6b:71:16:ca:04:f6:6c:90:e6:87:69:47:
                    88:13:fb:bd:44:d4:82:17:e8:4e:aa:3b:1e:9c:4c:
                    0f:65:0e:8a:c2:eb:aa:fd:8e:a3:9b:bf:6c:f4:f9:
                    09:34:34:24:70:74:7d:47:c7:74:ce:3d:57:40:f8:
                    c9:ad:e4:f5:9c:d8:b4:e5:0d:09:25:25:f7:13:61:
                    c6:13:65:77:e9:6b:c8:20:59:04:dd:db:93:78:23:
                    11:b6:17:97:75:50:60:04:81:99:d0:d4:1b:f1:33:
                    f5:6f:17:e8:bc:e3:f8:11:82:6c:7a:58:b6:ff:36:
                    b2:ad:58:e2:8e:da:cf:21:cb:8d:0c:e4:5e:c5:0a:
                    80:1a:46:f8:39:db:3c:bb:c5:8a:07:17:5e:da:62:
                    4a:ab:49:ef:26:fc:9f:09:c0:c0:19:76:63:6f:91:
                    6b:10:83:ac:bf:1d:5f:45:5e:3c:c2:3b:e6:b4:d7:
                    b1:8f:25:72:4d:1b:de:a4:86:0d:27:28:a8:9e:78:
                    60:b4:6e:f5:10:89:a4:6b:ce:e8:1d:ae:75:83:d6:
                    1a:ba:f9:6f:57:79:fa:14:ac:a6:42:ef:12:ef:a7:
                    98:d3:63:40:fd:6a:c7:d9:cd:7d:fc:e5:d5:a8:e8:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:17:11:AD:47:A5:39:70:90:4D:AE:6A:AD:FB:CF:53:B3:9C:0A:77
            X509v3 Authority Key Identifier:
                keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cf:42:1e:62:b6:11:ad:93:6c:56:9e:94:21:ef:24:79:3c:
         e1:64:33:be:43:20:bd:85:d2:b8:a7:44:d6:60:cf:4b:10:cf:
         df:72:82:b1:02:64:59:01:a7:7c:4a:97:e5:cd:c7:73:41:e2:
         5f:79:8b:1a:71:57:4e:b7:ab:a5:22:6e:e7:77:48:88:fd:00:
         96:08:1f:f3:f5:23:de:0c:e7:06:c9:0d:d6:ff:ed:1d:5e:91:
         58:b1:f5:e8:60:b7:92:1b:42:62:40:27:11:72:dc:b1:38:81:
         de:58:3f:25:00:43:3c:fd:f5:c6:c0:0b:97:cf:11:32:1f:17:
         ef:c1:ea:1c:35:a4:e9:d6:19:a7:12:80:53:11:75:08:1a:ed:
         4b:2d:a7:65:fd:1c:94:78:d4:c3:6f:5e:45:64:88:6e:fd:de:
         67:9f:b9:30:44:d6:59:ba:ad:d0:74:9f:ab:87:7f:66:c5:89:
         dd:17:5e:6d:b5:de:88:96:f3:af:f2:5f:c1:aa:e3:0f:01:5a:
         97:cc:1f:1d:1d:9c:0e:5a:42:26:cd:0a:8c:b6:08:74:ee:f4:
         df:cd:b6:40:0c:0a:ec:ff:2d:9e:4e:a2:0b:85:27:b5:40:4b:
         ed:ce:40:75:4b:f5:25:db:d2:cc:5f:eb:27:2c:e0:82:f6:6a:
         7f:09:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----